Sonicwall parser


Author
Message
marcin.wrazidlo
marcin.wrazidlo
Gaining Respect (128 reputation)Gaining Respect (128 reputation)Gaining Respect (128 reputation)Gaining Respect (128 reputation)Gaining Respect (128 reputation)Gaining Respect (128 reputation)Gaining Respect (128 reputation)Gaining Respect (128 reputation)Gaining Respect (128 reputation)
Group: Forum Members
Posts: 12, Visits: 58
I'm trying to set up a parser for the Sonicwall firewall.
I stop at moment on message.
I have two similar messages:
msg="Connection Closed" app=7927 n=12234655
msg="Connection Opened" app=49177 appName="General HTTPS" n=5319205
as you see on one is "appName". I worry that If this is missing in line, the parser will give me en error. Or not?
At moment whole message is in one column but I want to split it into different columns.
GO

Merge Selected

Merge into selected topic...



Merge into merge target...



Merge into a specific topic ID...





Similar Topics

Login

Explore
Messages
Mentions
Search